GNU bug report logs - #49841
[PATCH] gnu: mit-krb5: Update to 1.18.4 [fixes CVE-2021-36222].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 49841 in the body.
You can then email your comments to 49841 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: guix-patches <at> gnu.org
Subject: [PATCH] gnu: mit-krb5: Update to 1.18.4 [fixes CVE-2021-36222].
Date: Mon,  2 Aug 2021 21:59:15 -0400

* gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field.
(mit-krb5-1.18.4): New variable.
---
 gnu/packages/kerberos.scm | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/gnu/packages/kerberos.scm b/gnu/packages/kerberos.scm
index 20ed94b33b..92cc84b673 100644
--- a/gnu/packages/kerberos.scm
+++ b/gnu/packages/kerberos.scm
@@ -52,6 +52,7 @@
 (define-public mit-krb5
   (package
     (name "mit-krb5")
+    (replacement mit-krb5-1.18.4)
     (version "1.18")
     (source (origin
               (method url-fetch)
@@ -119,6 +120,28 @@ cryptography.")
     (home-page "https://web.mit.edu/kerberos/")
     (properties '((cpe-name . "kerberos")))))
 
+(define-public mit-krb5-1.18.4
+  ;; Hide the package to avoid displaying the confusing "1.1a" version in the
+  ;; user interface.
+  (hidden-package
+    (package
+      (inherit mit-krb5)
+      ; version 1.18.4
+      (version "1.1a")
+      (source (origin
+                (method url-fetch)
+                (uri (list
+                       (string-append "https://web.mit.edu/kerberos/dist/krb5/"
+                                      "1.18"
+                                      "/krb5-1.18.4.tar.gz")
+                       (string-append "https://kerberos.org/dist/krb5/"
+                                      "1.18"
+                                      "/krb5-1.18.4.tar.gz")))
+                (patches (search-patches "mit-krb5-hurd.patch"))
+                (sha256
+                  (base32
+                    "1j4zm5npv3yxrwrsdwlxias0ycj4qfxzgnz0h9zffla7b4pmw236")))))))
+
 (define-public shishi
   (package
     (name "shishi")
-- 
2.32.0

Message #8 received at 49841 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Leo Famulari <leo <at> famulari.name>
Cc: 49841 <at> debbugs.gnu.org
Subject: Re: bug#49841: [PATCH] gnu: mit-krb5: Update to 1.18.4 [fixes
 CVE-2021-36222].
Date: Tue, 10 Aug 2021 14:01:49 +0200

Hello,

Leo Famulari <leo <at> famulari.name> skribis:

> * gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field.
> (mit-krb5-1.18.4): New variable.

LGTM, thanks!  And apologies for the delay…

Ludo’.

Message #11 received at 49841 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 49841 <at> debbugs.gnu.org
Subject: Re: bug#49841: [PATCH] gnu: mit-krb5: Update to 1.18.4 [fixes
 CVE-2021-36222].
Date: Tue, 10 Aug 2021 12:20:19 -0400

On Tue, Aug 10, 2021 at 02:01:49PM +0200, Ludovic Courtès wrote:
> Hello,
> 
> Leo Famulari <leo <at> famulari.name> skribis:
> 
> > * gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field.
> > (mit-krb5-1.18.4): New variable.
> 
> LGTM, thanks!  And apologies for the delay…

Okay, pushed as fdd2f57359cb01b2a867aaff88b86989597c2953

If anyone should apologize for a delay, it's me! But really it's okay...

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.